CVE-2026-97517

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-97517", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-24T16:01:01.152Z", "datePublished": "2026-09-24T16:05:16.009Z", "dateUpdated": "2026-10-03T10:59:11.955Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-03T10:59:11.955Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: reject beacons with bad HE operation\n\nThe HE operation element not only needs to be longer than\nthe fixed part, but also have an appropriate size for the\nvariable part inside of it. Check this."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/wireless/nl80211.c"], "versions": [{"version": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6", "lessThan": "6e24f72985782013bf2feb0f0712b2ac9390e909", "status": "affected", "versionType": "git"}, {"version": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6", "lessThan": "8fe5eb7b68d76b3801409ada7365c67696e7af84", "status": "affected", "versionType": "git"}, {"version": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6", "lessThan": "6c4bb5450b9d9111faaaba581ea45a3a79844e50", "status": "affected", "versionType": "git"}, {"version": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6", "lessThan": "0d635f0b4a634eb599ed13a87ece0b5f129f9900", "status": "affected", "versionType": "git"}, {"version": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6", "lessThan": "8b9a100e1a76c52988b31099b349fd95a58c8768", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/wireless/nl80211.c"], "versions": [{"version": "5.7", "status": "affected"}, {"version": "0", "lessThan": "5.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/6e24f72985782013bf2feb0f0712b2ac9390e909"}, {"url": "https://git.kernel.org/stable/c/8fe5eb7b68d76b3801409ada7365c67696e7af84"}, {"url": "https://git.kernel.org/stable/c/6c4bb5450b9d9111faaaba581ea45a3a79844e50"}, {"url": "https://git.kernel.org/stable/c/0d635f0b4a634eb599ed13a87ece0b5f129f9900"}, {"url": "https://git.kernel.org/stable/c/8b9a100e1a76c52988b31099b349fd95a58c8768"}], "title": "wifi: nl80211: reject beacons with bad HE operation", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/wireless/nl80211.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "6e24f72985782013bf2feb0f0712b2ac9390e909", "status": "affected", "version": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6", "versionType": "git"}, {"lessThan": "8fe5eb7b68d76b3801409ada7365c67696e7af84", "status": "affected", "version": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6", "versionType": "git"}, {"lessThan": "6c4bb5450b9d9111faaaba581ea45a3a79844e50", "status": "affected", "version": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6", "versionType": "git"}, {"lessThan": "0d635f0b4a634eb599ed13a87ece0b5f129f9900", "status": "affected", "version": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6", "versionType": "git"}, {"lessThan": "8b9a100e1a76c52988b31099b349fd95a58c8768", "status": "affected", "version": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/wireless/nl80211.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.7"}, {"lessThan": "5.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: reject beacons with bad HE operation\n\nThe HE operation element not only needs to be longer than\nthe fixed part, but also have an appropriate size for the\nvariable part inside of it. Check this."}], "id": "CVE-2026-97517", "lastModified": "2026-10-03T11:18:00.950", "metrics": {}, "published": "2026-09-24T17:17:29.670", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0d635f0b4a634eb599ed13a87ece0b5f129f9900"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6c4bb5450b9d9111faaaba581ea45a3a79844e50"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6e24f72985782013bf2feb0f0712b2ac9390e909"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8b9a100e1a76c52988b31099b349fd95a58c8768"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8fe5eb7b68d76b3801409ada7365c67696e7af84"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: wifi: nl80211: reject beacons with bad HE operation", "id": "2540523", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540523"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nwifi: nl80211: reject beacons with bad HE operation\nThe HE operation element not only needs to be longer than\nthe fixed part, but also have an appropriate size for the\nvariable part inside of it. Check this.", "A flaw was found in the Linux kernel's nl80211 wireless configuration interface. This flaw can lead to a Denial of Service (DoS) caused by an out-of-bounds memory read when processing wireless beacon settings. The kernel fails to validate that the variable-length portion of a High Efficiency (HE) operation element is within expected bounds. A local user can exploit this vulnerability by submitting a malformed beacon configuration to crash the operating system."], "name": "CVE-2026-97517", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-97517\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-97517\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97517.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,6c4bb5450b9d9111faaaba581ea45a3a79844e50)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,0d635f0b4a634eb599ed13a87ece0b5f129f9900)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,8b9a100e1a76c52988b31099b349fd95a58c8768)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.12.111)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.18.53)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T02:30:07.413502+00:00", "updated": "2026-10-01T10:30:08.278258+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-119", "CWE-125", "CWE-20"]}